Pr. Cyber Information Assurance Analyst
Listed on 2025-12-31
-
IT/Tech
Cybersecurity
We anticipate the application window for this opening will close on 24 Dec 2025.
At Medtronic you can begin a life‑long career of exploration and innovation, while helping champion healthcare access and equity for all. You’ll lead with purpose, breaking down barriers to innovation in a more connected, compassionate world.
A Day in the LifeThis role will bring the specialized expertise and structure needed to navigate complex regulatory, contractual, and industry requirements. It will translate regulations into actionable controls, measure and reduce organizational risk, strengthen customer and stakeholder confidence, enable efficient cross‑functional alignment, and build and operate scalable, repeatable processes.
Core Responsibilities:
- Design and document repeatable processes for assessing the implementation and effectiveness of cybersecurity controls.
- Develop assessment methodologies aligned with internal policies, industry frameworks and regulatory requirements.
- Create clear workflows for pre‑assessment scoping, evidence collection, validation, scoring, and reporting.
- Build a structured process for tracking control deficiencies, assigning remediation tasks, and following up on resolution status.
- Define escalation protocols and reporting formats for unresolved issues and overdue remediation items.
- Support control owners with guidance on remediation expectations and timelines.
- Draft comprehensive documentation for all developed processes, procedures, and related templates.
- Develop and deliver training materials and user guides for stakeholders.
- Identify opportunities to improve the efficiency and effectiveness of compliance measurement and enforcement.
- Stay up to date with evolving cybersecurity and privacy regulations and advise on required updates to processes or tools.
- Represent the organization as primary contact for specific projects and initiatives, communicating with internal and external customers and vendors at various levels.
- Collaborate with legal, privacy, risk, and security teams to ensure processes align with broader enterprise compliance requirements.
- Coordinate with GCISO compliance lead(s), internal and external auditors as needed to support formal compliance reviews or assessments.
- Serve as a central point of contact for questions or issues related to cyber control compliance processes.
- 7+ years of relevant experience in compliance, risk management, or GRC functions with a bachelors degree or 5+ years of relevant experience with an advanced degree or 12+ years of relevant experience with a high school diploma or equivalent.
- Applicable certifications for cyber and/or compliance (e.g., CISSP, CISA, CRISC, CISM)
- Familiarity with compliance systems (e.g., One Trust, Logic Gate, Archer, etc.)
- Strong understanding of system administration principles and user management.
- Excellent analytical, communication, and problem‑solving skills.
- Previous Medtronic experience
- Bachelor’s or advanced degree
Job Requirements
The above statements are intended to describe the general nature and level of work being performed by employees assigned to this position, but they are not an exhaustive list of all the required responsibilities and skills of this position. The physical demands described within the Responsibilities section of this job description are representative of those that must be met by an employee to successfully perform the essential functions of this job.
Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions. For Office Roles:
While performing the duties of this job, the employee is regularly required to be independently mobile. The employee is also required to interact with a computer, and communicate with peers and co‑workers. Contact your manager or local HR to understand the work conditions and physical requirements that may be specific to each role.
Medtronic offers a competitive salary and flexible benefits…
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).